Jig + FLOW
Run exact workflows. Keep authority explicit.

FLOW packages are ordinary editable files. Jig reviews their exact meaning and runs only admitted bytes in a rootless Linux boundary.

3

Three commands

Initialize a bare project, review it with jig check, and execute an exact target with jig run.

One review boundary

Source proposes. Explicit review admits one immutable project generation. Live files never silently become execution authority.

One secure host

The first alpha has one fail-closed Linux, cgroup-v2, systemd, and Bubblewrap path. There is no weaker fallback.